DF-0323
ampdu_dispatch re-enters ieee80211_input while iterating rxa_m[] (re-entrancy)
Summary
ampdu_dispatch(:616) calls ieee80211_input inside rxa_m[] iteration loops(:844,:694,:730). M_AMPDU_MPDU bypass prevents re-entry to ampdu_reorder but not to BAR/action/crypto paths touching rap. Iterator/state invalidation -> KASSERTs exist because its gone wrong before. Remote A-MPDU.